A Scalable High Throughput Firewall in FPGA

High end network security applications demand high speed operation and large rule set support. Packet classification is the core functionality that demands high throughput in such applications. This paper proposes a packet classification architecture to meet such high throughput. We have Implemented a Firewall with this architecture in reconfigurable hardware. We propose an extension to Distributed Crossproducting of Field Labels (DCFL) technique to achieve scalable and high performance architecture. The implemented Firewall takes advantage of inherent structure and redundancy of rule set by using, our DCFL Extended (DCFLE) algorithm. The use of DCFLE algorithm results In both speed and area Improvement when It is Implemented in hardware. Although we restrict ourselves to standard 5-tuple matching, the architecture supports additional fields.High throughput classification Invariably uses Ternary Content Addressable Memory (TCAM) for prefix matching, though TCAM fares poorly In terms of area and power efficiency. Use of TCAM for port range matching is expensive, as the range to prefix conversion results in large number of prefixes leading to storage inefficiency. Extended TCAM (ETCAM) is fast and the most storage efficient solution for range matching. We present for the first time a reconfigurable hardware Implementation of ETCAM. We have implemented our Firewall as an embedded system on Virtex-II Pro FPGA based platform, running Linux with the packet classification in hardware. The Firewall was tested in real time with 1 Gbps Ethernet link and 128 sample rules. The packet classification hardware uses a quarter of logic resources and slightly over one third of memory resources of XC2VP30 FPGA. It achieves a maximum classification throughput of 50 million packet/s corresponding to 16 Gbps link rate for file worst case packet size. The Firewall rule update Involves only memory re-initialiization in software without any hardware change.

Structure of nonactin-calcium perchlorate, C40H64O12.Ca(ClO4)2, and a comparative study of metal-nonactin complexes

M r= 975.9, orthorhombic, Pnna, a = 20.262 (3), b= 15.717 (2), c= 15.038 (1)A, V= 4788.97 A 3, z = 4, D x = 1.35 Mg m -3, Cu Kct radiation, 2 = 1.5418 A, /t = 2.79 mm -1, F(000) -= 2072, T = 293 K, R = 0.08, 3335 observed reflections. The molecular structure and the crystal packing are similar to those observed in the nonactin complexes of sodium thiocyanate and potassium thiocyanate. The eight metal-O distances are nearly the same in the potassium complex whereas the four distances involving carbonyl O atoms are shorter than the remaining four involving the tetrahydrofuran-ring O atoms in the Na and the Ca complexes. This observation can be explained in terms of the small ionic radii of Na + and Ca 2+, and leads to a plausible structural rationale for the stronger affinity of nonactin for K + than for the other two metal ions.

A thermal molecular migration in the solid-state - structures of isomeric 5-amino-4-(2,6-dichlorophenyl)-1-(2-nitrophenyl)-1h-1,2,3-triazole (yellow form i) and 4-(2,6-dichlorophenyl)-5-(2-nitroanilino)-2h-1,2,3-triazole (red form-ii), c14h9cl2n5o2

Yellow form (I): Mr= 350.09, monoclinic, P2Jn, Z--4, a=9.525(1), b=14.762(1), c= 11.268(1),/t, fl= 107.82 (1) o , V= 1508.3 A 3 , Din(flotation in aqueous KI)= 1.539 (2), D x= 1.541 (2) g cm -3, #(Cu Ka, 2 = 1.5418 A) = 40.58 cm -~, F(000) = 712, T= 293 K, R = 8.8% for 2054 significant refections. Red form (II): Mr= 350.09, triclinic, Pi, Z=2, a=9.796(2), b= 10.750 (2), c= 7.421 (1)A, a= 95.29 (2), fl= 0108-2701/84/111901-05501.50 70.18 (1), y = 92-.76 (2) °, V= 731.9 A 3, Din(flotation in KI) = 1.585 (3), D x = 1.588 (3) g cm -3, ~t(Cu Ka, 2 = 1.5418/~) = 40.58 cm -1, F(000) = 356, T=293 K, R = 5.8% for 1866 significant reflections. There are no unusual bond distances or angles. The triazole and two phenyl rings are planar. On the basis of packing considerations the possibility of intermolecular interactions playing a role in the reactivity of the starting material is ruled out.

NMR-Studies of Octahedral Dicyano-(2,2' Bipyridine) and Tetracyano-(2,2'-Bipyridine) Iron(ii) Complexes

Coordination compounds of the polypyridines, 2,2 ' -bipyridine (bipy) and 1,10-penanthroline (phen) have offered renewed interest on account of their manifold applications and from the point of view of understanding their structure-reactivity relationships.1 Iron(II) reacts with them to form tris-complexes possessing spin-paired ground states. Cyanide ion greatly enhances the rate of displacement of bipy or phen to form the Schilt class of compounds. Fe(bipy)2(CN)2 and Fe(phen)2(CN)2. They display varying colours in solution depending upon the nature of the solvent and react reversibly with acids to form diprotonated species.2 Magnetic circular dichroism studies have been reported to describe their lowest electronic excitation.

Metal chelates in vinyl polymerization: Bulk polymerization of acrylonitrile initiated by Cu(II)-imine complexes

This article deals with the kinetics and mechanism of acrylonitrile (AN) polymerization initiated by Cu(II)-4-anilino 3-pentene 2-one[Cu(II)ANIPO], Cu(II)-4-p-toluedeno 3-pentene 2-one [Cu(II)TPO], and Cu(II)-4-p-nitroanilino 3-pentene 2-one [Cu(II)NAPO] in bulk at 60°C. The polymerization is free radical in nature. The exponent of initiator(I) is 0.5. The initiation step is a complex formation between the chelate and monomer and subsequent decomposition of the intermediate complex giving rise to free radical and Cu(I). This is substantiated by ultraviolet (UV) and electron spin resonance (ESR) studies. The activation energies and kinetic and chain transfer constants have also been evaluated.

He II spectra of La, Ce and Yb: Novel features in the valence band region

He II photoelectron spectra of La, Ce and Yb show features which cannot be explained in terms of single electron excitations. It is proposed that these are due to formation of electron-hole paris.

Scheme of squares: Part II. Systems formalism for sinusoidal perturbations

We extend here the formalism developed in Part I (for the potentiostatic response) to the admittance analysis of the scheme of squares. The results are applicable, as before, to several configurations of the electrode such as the rotating disk or the planar. All that one has to do is “to plug in” the appropriate matrices relating the interfacial concentrations to the fluxes.

Gauge theory of a group of diffeomorphisms. II. The conformal and de Sitter groups

The extension of Hehl's Poincaré gauge theory to more general groups that include space-time diffeomorphisms is worked out for two particular examples, one corresponding to the action of the conformal group on Minkowski space, and the other to the action of the de Sitter group on de Sitter space, and the effect of these groups on physical fields.

A revisit to Pope's cohort analysis

Gulland's [Gulland, J.A., 1965. Estimation of mortality rates. Annex to Arctic Fisheries Working Group Report (meeting in Hamburg, January 1965). ICES. C.M. 1965, Doc. No. 3 (mimeographed)] virtual population analysis (VPA) is commonly used for studying the dynamics of harvested fish populations. However, it necessitates the solving of a nonlinear equation for the instantaneous rate of fishing mortality of the fish in a population. Pope [Pope, J.G., 1972. An investigation of the accuracy of Virtual Population Analysis using cohort analysis. ICNAF Res. Bull. 9, 65-74. Also available in D.H. Cushing (ed.) (1983), Key Papers on Fish Populations, p. 291-301, IRL Press, Oxford, 405 p.] eliminated this necessity in his cohort analysis by approximating its underlying age- and time-dependent population model. His approximation has since become one of the most commonly used age- and time-dependent fish population models in fisheries science. However, some of its properties are not well understood. For example, many assert that it describes the dynamics of a fish population, from which the catch of fish is taken instantaneously in the middle of the year. Such an assertion has never been proven, nor has its implied instantaneous rate of fishing mortality of the fish of a particular age at a particular time been examined, nor has its implied catch equation been derived from a general catch equation. In this paper, we prove this assertion, examine its implied instantaneous rate of fishing mortality of the fish of a particular age at a particular time, derive its implied catch equation from a general catch equation, and comment on how to structure an age- and time-dependent population model to ensure its internal consistency. This work shows that Gulland's (1965) virtual population analysis and Pope's (1972) cohort analysis lie at the opposite end of a continuous spectrum as a general model for a seasonally occurring fishery; Pope's (1972) approximation implies an infinitely large instantaneous rate of fishing mortality of the fish of a particular age at a particular time in a fishing season of zero length; and its implied catch equation has an undefined instantaneous rate of fishing mortality of the fish in a population, but a well-defined cumulative instantaneous rate of fishing mortality of the fish in the population. This work also highlights a need for a more careful treatment of the times of start and end of a fishing season in fish population models.

Use of narrow-pore filters in He II transfer devices - new results

With the aim of finding simple methods for the fabrication of He II refilling devices, He II flow has been studied through filters made from various fine powders (oxides and metals, grain sizes in the range 0.05–2 μm) by compacting them under pressure. The results obtained for the different states of He II flow, especially in the “breakthrough” and “easy flow” range, are explained by the fountain effect, He II hydrodynamics and the choking effect. According to the results, pressedpowder filters can be classified into three groups with different flow characteristics, of which the “good transfer filters” with a behaviour neatly described by simple theory are suitable for use in He II refilling devices.

Adsorption isotherms for neutral organic compounds-A hierarchy in modelling: Part II

A two-state model allowing for size disparity between the solvent and the adsorbate is analysed to derive the adsorption isotherm for electrosorption of organic compounds. Explicity, the organic adsorbate is assumed to occupy "n" lattice sites at the interface as compared to "one" by the solvent. The model parameters are the respective permanent and induced dipole moments apart from the nearest neighbour distance. The coulombic interactions due to permanent and induced dipole moments, discreteness of charge effects, and short-range and specific substrate interactions have all been incorporated. The adsorption isotherm is then derived using mean field approximation (MFA) and is found to be more general than the earlier multi-site versions of Bockris and Swinkels, Mohilner et al., and Bennes, as far as the entropy contributions are concerned. The role of electrostatic forces is explicity reflected in the adsorption isotherm via the Gibbs energy of adsorption term which itself is a quadratic function of the electrode charge-density. The approximation implicit in the adsorption isotherm of Mohilner et al. or Bennes is indicated briefly.

Adsorption isotherms-Microscopic modelling: Part II

A lattice formahsm using "spin variables" is employed to analyse multi-state models for the adsorption of neutral dipoles.In particular, a spin-1/2 (two-state) model incorporating permanent and reduced dipole moments of the solvent and the organic adsorbate,substrate interactions, and &screteness of charge effects is analysed The resulting Generalized Islng Hamaltonian is solved under mean field approximation (MFA) in order to derive the adsorption isotherm for organic molecules A few spin-1 (three-state) models are also analysed under MFA to describe the competitive adsorption of multi-state solvent and organic dipoles, and the appropriate equilibrium relations are derived The unification and isomorphism existing at the Hamlltonlan level for several diverse realizations, such as adsorption of ions and solvent/orgamc molecules, is indicated The possibility of analysing phase transitions using this generalized approach is briefly indicated.

A Bayesian decision approach for sample size determination in phase II trials

Stallard (1998, Biometrics 54, 279-294) recently used Bayesian decision theory for sample-size determination in phase II trials. His design maximizes the expected financial gains in the development of a new treatment. However, it results in a very high probability (0.65) of recommending an ineffective treatment for phase III testing. On the other hand, the expected gain using his design is more than 10 times that of a design that tightly controls the false positive error (Thall and Simon, 1994, Biometrics 50, 337-349). Stallard's design maximizes the expected gain per phase II trial, but it does not maximize the rate of gain or total gain for a fixed length of time because the rate of gain depends on the proportion: of treatments forwarding to the phase III study. We suggest maximizing the rate of gain, and the resulting optimal one-stage design becomes twice as efficient as Stallard's one-stage design. Furthermore, the new design has a probability of only 0.12 of passing an ineffective treatment to phase III study.